原文传递
Active Response Using Host Based Intrusion Detection System and Software Defined Networking.
| 题名： | Active Response Using Host Based Intrusion Detection System and Software Defined Networking. |
| 作者： | Goodgion, J. S. |
| 关键词： | Intrusion detection systems, Computer network security, Denial of service attack, Network protocols, Operating systems, Authentication, Central processing units, Debugging, Network architecture, Transport protocols, Computer programs, Software defined radio, Openflow, Software-dened networking |
| 摘要： | This research proposes AHNSR: Active Host-based Network Security Response by utilizing Host-based Intrusion Detection Systems (HIDS) with Software-Defined Networking (SDN) to enhance system security by allowing dynamic active response and reconstruction from a global network topology perspective. Responses include traffic redirection, host quarantining, filtering, and more. A testable SDN-controlled network is constructed with multiple hosts, OpenFlow enabled switches, and a Floodlight controller, all linked to a custom, novel interface for the Open-Source SECurity(OSSEC) HIDS framework. OSSEC is implemented in a server-agent architecture, allowing scalability and OS independence. System effectiveness is evaluated against the following factors: alert density and a selective Floodlight module response types. At the expected operational load of 500 events per second (EPS), results reveal a mean system response time of 0.5564 seconds from log generation to flow table update via Floodlights Access Control List module. Load testing further assesses performance at 10 - 10000 EPS for all tested response modules. |
| 报告类型： | 科技报告 |
相关文献
- Proactive Host Mutation in Software Defined Networking.
- Quality of Service Impacts of a Moving Target Defense with Software Defined Networking.
- Virtual Machine Detection in Software Defined Networks.
- Active Work Zone Safety Using Emerging Technologies 2017
- Performance Prediction of the SAE J1850 and Related Buses for In-Vehicle Communications Requirements for the ITS Safety-Related Services; Technical summary
- IMPROVING SURVIVABILITY OF INTELLIGENT TRANSPORTATION SYSTEMS: APPLICATION-LEVEL INTRUSION DETECTION CASE STUDY.
检索历史
应用推荐
